i want to ask about filter wireshark uses to draw throughput graph is it frame.len or tcp.analysis.bytes_in_flight i want the filter that shows values in throughput graph thank you asked 16 May '15, 07:12 shady |
One Answer:
It's not a display filter, it is a function in tcp_graph.C. It uses the TCP segment length and the TCP delta time. You can also look at Statistics > Summary for average bytes/sec. answered 16 May '15, 10:12 Roland thank you but i wanted a filter gives me the same values appear in throughput graph in order to use it in tshark and extract these numbers in one column in csv file i think its frame.len ??? (17 May '15, 03:50) shady From where do you have the ideea with frame.len? TCP segment length is tcp.len (17 May '15, 12:49) Roland i compared values appeared in graph with values in frame.len i will confirm this point (20 May '15, 01:22) shady |
which throughput graph are you talking about? Statistics -> IO Graph and then Bits/tick?